CVE-2026-111898

Vendor

Red Hat

Product

Keycloak / Single Sign-On, Java libraries / app servers, Open-source identity providers

CVSS

7.5

EPSS

0.004 (p38)

Exposure class

Identity, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 22
   CVE NVD 14d ago

   phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by…

   phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred_username or email. Attackers controlling a Keycloak identity with…

   CVSS 7.5 CVE-2026-111898 Red Hat